Proceedings of the 8th International Conference on Security of Information and Networks最新文献_第6页

Protection from binary and multi-symbol packet length covert channels 保护二进制和多符号包长度隐蔽信道

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2799994

A. Epishkina, K. Kogos

引用次数: 1

Simulation user behavior on a security testbed using user behavior states graph 使用用户行为状态图在安全测试台上模拟用户行为

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2799985

A. Amirkhanyan, Andrey Sapegin, Marian Gawron, Feng Cheng, C. Meinel

{"title":"Simulation user behavior on a security testbed using user behavior states graph","authors":"A. Amirkhanyan, Andrey Sapegin, Marian Gawron, Feng Cheng, C. Meinel","doi":"10.1145/2799979.2799985","DOIUrl":"https://doi.org/10.1145/2799979.2799985","url":null,"abstract":"For testing new methods of network security or new algorithms of security analytics, we need the experimental environments as well as the testing data which are much as possible similar to the real-world data. Therefore, the researchers are always trying to find the best approaches and recommendations of creating and simulating testbeds, because the issue of automation of the testbed creation is a crucial goal to accelerate research progress. One of the ways to generate data is simulate the user behavior on the virtual machines, but the challenge is how to describe what we want to simulate. In this paper, we present a new approach of describing user behavior for the simulation tool. This approach meets requirements of simplicity and extensibility. And it could be used for generating user behavior scenarios to simulate them on Windows-family virtual machines. The proposed approached is applied to our developed simulation tool that we use for solving a problem of the lack of data for research in network security and security analytics areas by generating log dataset that could be used for testing new methods of network security and new algorithms of security analytics.","PeriodicalId":293190,"journal":{"name":"Proceedings of the 8th International Conference on Security of Information and Networks","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134007632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Large-scale systems security evolution: control theory approach 大规模系统安全演化:控制理论方法

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2799993

T. Stepanova, D. Zegzhda

引用次数: 5

A new algorithm for unkeyed jam resistance 一种新的无键抗干扰算法

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800008

Hamid Hanifi, L. Baird, R. Thurimella

引用次数: 3

A classification framework for distinct cyber-attacks based on occurrence patterns 基于发生模式的不同网络攻击分类框架

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800037

M. S. Awan, Mohammed A. Alghamdi, Sultan H. Almotiri, P. Burnap, O. Rana

引用次数: 1

sandFOX: secure sandboxed and isolated environment for firefox browser sandFOX: firefox浏览器的安全沙盒和隔离环境

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800000

Anil Saini, M. Gaur, V. Laxmi, P. Nanda

{"title":"sandFOX: secure sandboxed and isolated environment for firefox browser","authors":"Anil Saini, M. Gaur, V. Laxmi, P. Nanda","doi":"10.1145/2799979.2800000","DOIUrl":"https://doi.org/10.1145/2799979.2800000","url":null,"abstract":"Browser functionalities can be widely extended by browser extensions. One of the key features that makes browser extensions so powerful is that they run with \"high\" privileges. As a consequence, a vulnerable or malicious extension might expose browser, and operating system (OS) resources to possible attacks such as privilege escalation, information stealing, and session hijacking. The resources are referred as browser as well as OS components accessed through browser extension such as accessing information on the web application, executing arbitrary processes, and even access files from a host file system. This paper presents sandFOX (secure sandbox and iso- lated environment), a client-side browser policies for constructing sandbox environment. sandFOX allows the browser extension to express fine-grained OS specific security policies that are enforced at runtime. In particular, our proposed policies provide the protection to OS resources (e.g., host file system, network and processes) from the browser attacks. We use Security-Enhanced Linux (SELinux) to tune OS and build a sandbox that helps in reducing potential damage from attacks on the OS resources. To show the practicality of sandFOX in a range of settings, we compute the effectiveness of sandFOX for various browser attacks on OS resources. We also show that sandFOX enabled browser experiences low overhead on loading pages and utilizes negligible memory when running with sandbox environment.","PeriodicalId":293190,"journal":{"name":"Proceedings of the 8th International Conference on Security of Information and Networks","volume":"114 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117310043","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Application of cluster analysis for the assessment of the share of fraud victims among bank card holders 应用聚类分析评估银行卡持卡人中诈骗受害者的比例

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800033

S. Alkhasov, Alexander Tselykh, A. Tselykh

引用次数: 6

Improved trust based key management for end-to-end secure communication in cellular networks 蜂窝网络中端到端安全通信改进的基于信任的密钥管理

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800014

Naila Mukhtar, M. S. Baig, L. A. Khan

引用次数: 0

Problems of data protection in industrial corporations enterprise architecture 工业企业架构中的数据保护问题

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2800032

V. Glukhov, I. Ilin, A. Anisiforov

引用次数: 31

Record linkage applications in health services research: opportunities and challenges 记录链接在卫生服务研究中的应用:机遇与挑战

Proceedings of the 8th International Conference on Security of Information and Networks Pub Date : 2015-09-08 DOI: 10.1145/2799979.2799983

R. Thurimella, Rinku Dewri, William Mitchell

引用次数: 0